Xpdf · Xpdf · CVE-2003-0434
Name of the Vulnerable Software and Affected Versions:
Adobe Acrobat version 5.06
Xpdf version 1.01
Description:
The issue allows remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink in PDF files. This can be exploited when a user opens a malicious PDF file using a vulnerable PDF viewer.
Recommendations:
For Adobe Acrobat version 5.06, update to a version that fixes this issue.
For Xpdf version 1.01, update to a version that fixes this issue.
As a temporary workaround, consider avoiding the use of hyperlinks in PDF files until a patch is available.